
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/bTLhUYcxYlmO3y9vBiSf36khZEY.roa
File: bTLhUYcxYlmO3y9vBiSf36khZEY.roa (raw, json)
Hash identifier: 27gEfFTINe5D/zZmtOhoVLpfavV/oAnIDGTv5BAyhpE=
Subject key identifier: 6D:32:E1:51:87:31:62:59:8E:DF:2F:6F:06:24:9F:DF:A9:21:64:46
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 67
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/bTLhUYcxYlmO3y9vBiSf36khZEY.roa
Signing time: Tue 31 Mar 2026 08:15:36 +0000
ROA not before: Tue 31 Mar 2026 08:15:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131934
IP address blocks: 221.132.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: Mar 31 08:15:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6D32E151873162598EDF2F6F06249FDFA9216446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:8e:b3:b9:2d:f9:cf:6a:79:77:3b:20:de:
e2:9b:0b:1d:ee:67:4b:cd:fe:37:56:19:ab:0e:82:
53:58:3a:be:75:ca:a0:62:8c:0d:df:de:67:19:02:
53:2e:83:44:9f:29:35:f9:c3:cb:f1:46:df:8c:4f:
c0:3b:7f:c2:03:ba:b0:fb:39:e1:24:b2:08:4b:cc:
4c:06:58:71:d4:78:92:81:05:20:9b:a0:c5:cb:92:
ac:c1:78:0d:36:b9:ce:dc:80:3d:93:81:f9:24:84:
21:6a:77:11:ff:fc:3e:c0:d8:20:a7:9e:eb:49:47:
1f:0e:ab:55:b7:f5:d6:f5:c6:2f:5f:e1:d7:d3:0a:
bb:bc:22:0f:b4:44:28:00:8f:ee:96:ef:81:a5:42:
92:a5:22:5d:b2:c7:9d:b9:d1:8a:30:d0:90:88:4c:
22:ee:79:4e:2b:08:92:b6:7e:50:5a:ec:bd:1f:6f:
bd:b2:d7:87:be:bd:0d:c1:ed:84:c8:c4:f7:65:c8:
98:44:a5:bb:3b:e5:5d:a8:1a:15:a5:19:9b:b1:2e:
f7:4a:8c:fa:eb:45:3f:6b:be:fc:9c:1f:cb:8f:d8:
8f:ba:26:74:81:0c:0c:0a:af:62:42:64:b3:72:52:
bc:1a:b8:e9:e5:16:5b:24:1d:08:c0:f3:d8:72:c2:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:E1:51:87:31:62:59:8E:DF:2F:6F:06:24:9F:DF:A9:21:64:46
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/bTLhUYcxYlmO3y9vBiSf36khZEY.roa
sbgp-ipAddrBlock: critical
IPv4:
221.132.96.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:4b:ae:af:71:e3:62:c5:0f:88:72:c4:89:8b:b5:bf:f8:48:
b7:a5:a2:b1:a0:73:8e:13:aa:b1:c3:8e:3f:09:f6:fa:fe:6f:
94:0b:e4:63:aa:55:69:92:33:46:80:a3:b8:dc:15:98:e5:d4:
ef:94:5a:64:31:6c:8d:53:58:37:a1:56:0d:0c:20:2d:09:f3:
aa:d8:7b:5f:2f:c6:da:ab:1f:18:9b:80:e5:a2:23:01:dd:ac:
33:a5:87:3a:97:8f:6c:42:1a:3e:73:2b:6a:6b:3f:56:04:95:
95:06:44:d7:c1:b1:7d:5a:fd:a7:a3:25:22:41:f3:25:ca:51:
3a:cb:70:3d:fd:1e:ee:88:9f:65:87:d2:05:18:f4:3b:e1:66:
7b:d5:4f:0f:4f:85:62:11:f7:68:69:06:af:34:9e:39:30:6b:
eb:8a:d4:7e:6a:ba:17:2f:2b:86:c0:c4:d0:80:03:4b:9a:5f:
8e:7c:15:53:67:30:15:9e:f3:a0:cb:1d:3d:2d:a0:68:4e:53:
c9:8b:5b:b7:73:39:ab:e2:16:bc:77:f3:2c:ee:02:3a:b7:25:
6c:98:fd:d1:b3:74:57:91:b0:4a:2f:74:1b:d5:ae:e6:f7:65:
8c:cf:b4:18:47:c5:65:5b:8c:f3:7f:22:a4:68:43:a4:f9:8a:
68:45:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:53 2026 by rpki-client